treewide: add Cloudflare cache purge on content updates

Automatically purges entire Cloudflare zone cache when articles,
projects, or members are created/updated/deleted.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Author: aster-void

.env.sample

@@ -14,3 +14,7 @@ S3_PUBLIC_URL=http://localhost:9000/dev
 
 # Set to "true" to bypass auth (dev only!)
 UNSAFE_DISABLE_AUTH=true
+
+# Cloudflare cache purge (leave empty to disable)
+CLOUDFLARE_ZONE_ID=""
+CLOUDFLARE_API_TOKEN=""

src/lib/data/private/articles.remote.ts

@@ -10,6 +10,7 @@ import {
   updateArticle,
 } from "$lib/server/database/articles.server";
 import { requireUtCodeMember } from "$lib/server/database/auth.server";
+import { purgeCache } from "$lib/server/services/cloudflare/cache.server";
 
 // Re-export getMembers from canonical source
 export { getMembers } from "./members.remote";
@@ -37,7 +38,9 @@ export const saveArticle = command(
   }),
   async (data) => {
     await requireUtCodeMember();
-    return await createArticle(data);
+    const result = await createArticle(data);
+    purgeCache().catch(console.error);
+    return result;
   },
 );
 
@@ -57,21 +60,28 @@ export const editArticle = command(
   }),
   async ({ id, data }) => {
     await requireUtCodeMember();
-    return await updateArticle(id, data);
+    const result = await updateArticle(id, data);
+    purgeCache().catch(console.error);
+    return result;
   },
 );
 
 export const removeArticle = command(v.string(), async (id) => {
   await requireUtCodeMember();
   await deleteArticle(id);
+  purgeCache().catch(console.error);
 });
 
 export const publish = command(v.string(), async (id) => {
   await requireUtCodeMember();
-  return await publishArticle(id);
+  const result = await publishArticle(id);
+  purgeCache().catch(console.error);
+  return result;
 });
 
 export const unpublish = command(v.string(), async (id) => {
   await requireUtCodeMember();
-  return await unpublishArticle(id);
+  const result = await unpublishArticle(id);
+  purgeCache().catch(console.error);
+  return result;
 });

src/lib/data/private/members.remote.ts

@@ -8,6 +8,7 @@ import {
   listMembers,
   updateMember,
 } from "$lib/server/database/members.server";
+import { purgeCache } from "$lib/server/services/cloudflare/cache.server";
 
 export const getMembers = query(async () => {
   await requireUtCodeMember();
@@ -29,7 +30,9 @@ export const saveMember = command(
   }),
   async (data) => {
     await requireUtCodeMember();
-    return await createMember(data);
+    const result = await createMember(data);
+    purgeCache().catch(console.error);
+    return result;
   },
 );
 
@@ -46,11 +49,14 @@ export const editMember = command(
   }),
   async ({ id, data }) => {
     await requireUtCodeMember();
-    return await updateMember(id, data);
+    const result = await updateMember(id, data);
+    purgeCache().catch(console.error);
+    return result;
   },
 );
 
 export const removeMember = command(v.string(), async (id) => {
   await requireUtCodeMember();
   await deleteMember(id);
+  purgeCache().catch(console.error);
 });

src/lib/data/private/projects.remote.ts

@@ -11,6 +11,7 @@ import {
   transferLead as serverTransferLead,
   updateProject,
 } from "$lib/server/database/projects.server";
+import { purgeCache } from "$lib/server/services/cloudflare/cache.server";
 import type { ProjectCategory, ProjectRole } from "$lib/shared/models/schema";
 
 // Re-export getMembers from canonical source
@@ -56,7 +57,9 @@ export const saveProject = command(
   }),
   async ({ data, leadMemberId }) => {
     await requireUtCodeMember();
-    return await createProject(data, leadMemberId);
+    const result = await createProject(data, leadMemberId);
+    purgeCache().catch(console.error);
+    return result;
   },
 );
 
@@ -76,13 +79,16 @@ export const editProject = command(
   }),
   async ({ id, data }) => {
     await requireUtCodeMember();
-    return await updateProject(id, data);
+    const result = await updateProject(id, data);
+    purgeCache().catch(console.error);
+    return result;
   },
 );
 
 export const removeProject = command(v.string(), async (id) => {
   await requireUtCodeMember();
   await deleteProject(id);
+  purgeCache().catch(console.error);
 });
 
 export const addMember = command(
@@ -94,6 +100,7 @@ export const addMember = command(
   async ({ projectId, memberId, role }) => {
     await requireUtCodeMember();
     await addProjectMember(projectId, memberId, role);
+    purgeCache().catch(console.error);
   },
 );
 
@@ -105,6 +112,7 @@ export const removeMember = command(
   async ({ projectId, memberId }) => {
     await requireUtCodeMember();
     await removeProjectMember(projectId, memberId);
+    purgeCache().catch(console.error);
   },
 );
 
@@ -129,5 +137,6 @@ export const transferLead = command(
     }
 
     await serverTransferLead(projectId, currentLead.memberId, newLeadMemberId);
+    purgeCache().catch(console.error);
   },
 );

src/lib/env/env.server.ts

@@ -13,6 +13,9 @@ const Env = v.object({
   S3_BUCKET: v.string(),
   S3_PUBLIC_URL: v.string(),
   UNSAFE_DISABLE_AUTH: v.optional(v.picklist(["true"])),
+
+  CLOUDFLARE_ZONE_ID: v.string(),
+  CLOUDFLARE_API_TOKEN: v.string(),
 });
 
 export const env = v.parse(Env, process.env);

src/lib/server/services/cloudflare/cache.server.ts

@@ -0,0 +1,21 @@
+import { env } from "$lib/env/env.server";
+
+const CLOUDFLARE_API_BASE = "https://api.cloudflare.com/client/v4";
+
+export async function purgeCache(): Promise<void> {
+  if (!env.CLOUDFLARE_ZONE_ID || !env.CLOUDFLARE_API_TOKEN) return;
+
+  const res = await fetch(`${CLOUDFLARE_API_BASE}/zones/${env.CLOUDFLARE_ZONE_ID}/purge_cache`, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${env.CLOUDFLARE_API_TOKEN}`,
+      "Content-Type": "application/json",
+    },
+    body: JSON.stringify({ purge_everything: true }),
+  });
+
+  if (!res.ok) {
+    const body = await res.text();
+    throw new Error(`Cloudflare cache purge failed: ${res.status} ${body}`);
+  }
+}